Application Times-out and requests user's credentials

[AlejandroMari1]

We have an ExB application running on top for ArcGIS Enterprise 10.9.0. AGS enterprise is using Integrated Windows authentication to authenticate users and Single Sign On is enabled (users never enter their credentials). 

The application works fine, however after 30 minutes or so, they authentication seems to "timeout" and the user gets a message saying "Please sign in to access the item" (see below). You can't put your credentials here since the system is using IWA, so the only way to continue using the app is to reload the full app and start over again.

I thought it might be due to inactivity, but it's not. I even added a component that will make a query to Portal every minute to see if this will keep it alive, but didn't work.

Any thoughts on this? 

Thanks!

Alejandro

[AlejandroMari1]

That's disappointing to hear, we are planning an upgrade to 11.x later this year. 

[John_Tyll]

Hi Alejandro,

I hope you figured this out by now!  I am on 11.1 windows and have the same thing happening. I have an EXB that is open to everyone that works fine but all the EXB's that are based on AD groups for access are doing the timeout thing. So, I believe it is related to AD membership in a group, but I don't know how to fix it. Hopefully, there is a setting someone can enlighten me about regarding how often portal is checking for AD group membership, or something like that???   

Thanks in advance!

John

[AlejandroMari1]

Hi John, unfortunately we haven't figured it out yet. Still happening pretty much across the board with ExB (even using the latest dev. edition 1.14). Agreed it's related to AD membership. We tried different time-out settings on the JS API side and ExB configuration, but none of that mattered. The time-out seems random as well, sometimes it happens within a few minutes, and sometimes hours.

Alejandro

[John_Tyll]

Thanks for the reply Alejandro, sorry to hear it is still an issue. Were you able to try the suggestions Jeffrey Thompson2 provided, and did anything change?  

John

[JeffreyThompson2]

https://community.esri.com/t5/arcgis-experience-builder-questions/connect-with-sso-on-experience-bui...

I am also dealing with user reports of this issue on 10.9.1 with Experience Builder 1.12. This post also appears related and has two possible solutions. 

1. Altering Enterprise security settings to prevent ArcGIS login.
2. Adding the AppID to the config.json file (for Developer Edition).

[John_Tyll]

Thanks Jeffrey, 

I did see that post and we tried adding the AppID to the config.json, but it didn't solve the problem. For option 1 while we mainly use SSO via Integrated Windows Authentication we have an administrative login IT created that uses ArcGIS login to authenticate so I can't test that option to see if it is the fix. As it is now that wouldn't be our fix without re-work on our current deployment. 

[QuantitativeFuturist]

I believe we have a solution for this, I'll ask my senior developer to post our findings when he gets back from vacation next week. Thanks

[John_Tyll]

Thanks QuantitativeFuturist!  I am looking forward to hearing more.  -John

[JeffreyThompson2]

Do you have any information to share?

[John_Tyll]

Bump!

Good Morning, I am checking in to see if you have an update? 

Thanks!